filter connections by both provider and user Id

Currently login_handler assumes that provider_user_id is unique across all different providers.
That's not guaranteed to be true, for example paulftw at Github and paulftw at Twitter are different people.
Facebook uses integer numbers to identify users, these may collide with some other (existing or future) OAuth provider.